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Self Separation Concept 




Separation and Automation 


• Collision 

- Scrape paint 

- Avoid through pilot, controller, and TCAS 



Loss of Separation 

- Separation standards are violated 
(5nmi, 1000ft) 

- Avoid through human and/or automation 
decisions 


Conflict 

Predicted loss of separation 
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Separation Algorithms 


Conflict Detection 


- Detect future loss of 
separation 


-►9 

■ 


Conflict Resolution 

- Suggest maneuvers 
to avoid a conflict 
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Conflict Prevention 

- Provide conflict-free 
maneuvers 
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Trajectory Algorithms 


Conflict Detection 




- Detect future loss of 
separation 



Conflict Resolution 


- Suggest maneuvers 
to avoid a conflict 



Conflict Prevention 

- Provide conflict-free 
maneuvers 
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Recovery Algorithms 


Conflict Recovery 

- Suggest maneuvers to 
regain desired path 


Loss of Separation Recovery 

- For a variety of reasons 
separation may be lost 

- Suggest a maneuver to 
regain separation 
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Research Goal 


Develop a mathematical framework for 
the verification that such algorithms are 
correct (i.e., maintain safety properties) 


Outline 


• Introduction 

• Example: Resolution 

• Criteria Approach to Coordination 

• Using Criteria 

• Criteria Details 

• Summary 
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Resolution 



• Each aircraft determines its own set of maneuvers to avoid 
the other aircraft 

- Go right/left 

- Speed up/slow down 

- Go up/down 

• Safety Properties 

- Independence: free of conflicts if one aircraft maneuvers 

- Coordination: free of conflicts if both aircraft maneuver 

• Customer Desires 

- No specific communication between aircraft 

- No unfair rules: lower aircraft ID goes first, etc. 
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Coordination Examples 




Uh, oh... 
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Coordination 


• Correctness 

-When both aircraft maneuver, is the combined 
maneuver safe? 

- Relies on “knowing” what the other aircraft is 
going to do 

• How to achieve this knowledge? 

- Single algorithm 

- Multiple algorithms 
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Single Algorithm 


• Single algorithm needs a single verification 
that the algorithm is coordinated with itself 

- For example, TCAS 

• But this algorithm must 

- Accommodate aircraft with widely different 
performance envelopes 

- Have the entire fleet upgraded at one time 

• When new versions come out 

- Be used by everyone... 

• Competing airlines 

• Military traffic 

• International traffic 
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Multiple Algorithms 


• Avoid the difficulties with a single algorithm 

- Multiple versions of TCAS are an example 

• But multiple algorithms require 

- Each algorithm to be verified with every other 
algorithm 

• Costly NxN verification 

- This cost grows as new algorithms are added 

• and possibly exclude correct new algorithms 
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Multiple Algorithms 


• Avoid the difficulties with a single algorithm 

- Multiple versions of TCAS are an example 

• But multiple algorithms require 

- Each algorithm to be verified with every other 
algorithm 

• Costly NxN verification 

- This cost grows as new algorithms are added 

• and possibly exclude correct new algorithms 

We have developed an approach that allows 
multiple algorithms with a verification cost 
close to a single algorithm 
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What is 
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Criteria? 


• Criteria is a range 
of resolutions 

• Each aircraft 
chooses any 
resolution within the 
criteria 

• The joint maneuver 
is coordinated 

• Criteria is simple so 

algorithms can be 
checked in a 
straight-forward 
way ie 


Multiple Algorithms 


Show each 
algorithm -< 
satisfies the 
criteria 
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Criteria “Filtering” 


Any Resolution 
Algorithm 


A 


retry 



Coordinated 

Resolution 


Theunissen and Uijt de Haag, “Towards a seamless integration of awareness support and 
alerting systems: Why and how” 30 th Digital Avionics Systems Conference (DASC), 2011 
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Integrated Criteria 


• Alternately, one can check if an algorithm 
inherently satisfies the criteria 

- Perform a mathematical/software verification 
that resolutions always satisfy the criteria 

- We have done this for several algorithms 

• Anthony Narkawicz and Cesar Munoz. State- 
Based Implicit Coordination and Applications . 
NASA TP-201 1-217067, March 2011. 
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What is Safe? 




Conflict-free 

For all t > 0 : I Is + tv 1 1 > D 


In Loss of Separation 

1 1 s + rv' || > 1 1 s + tv 1 1 , where r 
is the time of closest approach ^ 


vertical horizontal 


Criteria 


in Conflict 


in Loss of Separation 


(s • v') > eR { • v') 


(s • v') > s • v AND 
(s • v') > s 





A > 0 AND t > 0 AND 


v' z 7 ^ 0 AND s z v' z > 0 AND s z v z > 0 


IMPLIES 

5 = 1 AND s z v z > 0 


IF v z = 0 THEN 



OR 


break_sym(s)('u^) > 0 

\s z + tv z \ > H AND 


ELSE 

5\s z + tv z \v z < 0 


sign(v z )v' z > 0 


Horizontal Criterion 


(s • v) > eR(s ± • v) 


where, 

e = sign^s 1 - • v) 
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Summary 


• Multiple algorithms and one criteria solves practical 
problems 

- Specialized algorithms for different aircraft performance 
envelopes 

- Algorithms can evolve 

» don’t have to upgrade the fleet at one time 

- Different algorithms from different vendors 

» Different avionics suppliers 
» Customize algorithms for different airlines 
» International vendors 

- No costl NxN verification 

• All coordinated solutions are really proposing a criteria 

- Complexity of criteria: “use my algorithm” vs. equations 


